Coinbase has sent a patent application for a new Bitcoin payments system with enhanced security protocols. This patent filing is the latest in a series of applications submitted by the company as they continue to be interested in the area of protocol development for the emerging cryptocurrency ecosystem.
Details of the Bitcoin Payments System
According to a filing with the United States Patent and Trademark Office (USPTO) published on Tuesday (August 14, 2018), Coinbase described a system that could function as a payment portal. This payment portal would be able of carrying out transactions right from the cryptocurrency wallet of the user.
A portion of patent filing reads:
It may be a security concern for users that the private keys of their Bitcoin addresses may be stolen from their wallets. Existing systems do not provide a solution for maintaining security over private keys while still allowing the users to checkout on a merchant page and making payments using their wallets.
How the System Works
A summary of the patent filing describes a system where users via a “key ceremony” encrypt their passphrases into masterkey. The reason for this encryption is to prevent the theft of the masterkey. The masterkey is in turn used to encrypt both the user’s private key and the transaction itself. After every transaction, the masterkey is deleted.
Another important component of the system is the introduction of freeze/unfreeze capability. The freeze logic is utilized when the user reports that they have been hacked. The patent application said:
At any point in time after the master key is loaded, the system can be frozen. The system can be unfrozen after it has been frozen using keys from the key ceremony. The checkout process can be carried out when the system is frozen and when the system is unfrozen. The payment process can only be carried out when the system is unfrozen and not when the system is frozen.
In addition to the security protocols, the proposed Bitcoin payments system also has API integration capabilities to enable websites to run versions of the payment portal. As an extra layer of security, the API paradigm utilizes a pair of keys – one saved on the server of the website and other saved with Coinbase. For any transaction to be approved, the 2 keys must match.